Description

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

Remediation

References

CVE-2009-2687

Related Vulnerabilities

XWiki Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2022-24819)

WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.4)

Ruby on Rails CVE-2024-28103 Vulnerability (CVE-2024-28103)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29514)

MySQL CVE-2020-2763 Vulnerability (CVE-2020-2763)

Severity

Medium

Classification

CVE-2009-2687 CWE-20

Tags

Missing Update Known Vulnerabilities